I am trying to implement SSO for my application. My application currently runs on Tomcat application server, I heard that its not possible to implement SSO (install web agent) on application server rather we need a web server which directs the user to the application (running on application server). Is that right? Can someone confirm?
Since our SSO provider didn't support tomcat application server, I integrated the Apache webserver with tomcat application server using mod_jk. The SSO module was loaded to Apache webserver which acts as a middle layer between User and tomcat application server. User first access the application via the webserver IP address which does the authentication, once the authentication is complete it routes the user to the application running on Tomcat application server.